AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User cleanerweb joined AbuseIPDB in December 2025 and has reported 146 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇸🇬 139.99.89.100	11 Sep 2026	This IP 139.99.89.100 is being used by thekinsmen.net to host 419 advanced fee fraud scam sites for ... show more This IP 139.99.89.100 is being used by thekinsmen.net to host 419 advanced fee fraud scam sites for Nigerian scammers, using the following nameservers: dns1.thekinsmenservers.com dns2.thekinsmenservers.com We can see the scam sites here: https://dns.coffee/nameservers/dns2.thekinsmenservers.com Here are some of the scam sites that they host: aslcapitalmkt.com bitwapcrypto.com crediset.com firstncfc.com nextfxlimited.com nextprofitapp.com palmheritagebank.com premiumcurrency-ltd.com revexglobal.net royalpinetrade.com wealthfundassets.com show less	Phishing
🇩🇪 77.90.50.86	10 Sep 2026	This is being used by prymhosting.com who are a Nigerian 419 advanced fee fraud facilitating web hos ... show more This is being used by prymhosting.com who are a Nigerian 419 advanced fee fraud facilitating web host who host scam sites for other Nigerian cyber criminals. Name Servers: ns5.prymhosting.com ns6.prymhosting.com We can see all the scam sites hosted on this particular nameserver here: https://dns.coffee/nameservers/ns5.prymhosting.com Here is a list of some of the scam sites being hosted on this IP: appleearningshares.xyz astoriaprimes.com aurioncapital.org bitforttunepro.com citisbm.com cofucapital.com crestchoicex.com dual-coin.org eaasetraders.com esmertorna.org fidelonix.com lumexaexchange.com nexustrustfin.com northbridgepay.live smartvestminers.com teslainvpro.com teslametatrade.com titancredabk.com truesafefina.com trustesavingsbk.com unityglobal.live veltrixbnk.live viontrust.cfd visitalcapital.com westoriadc.com show less	Phishing
🇸🇬 46.183.27.159	09 Sep 2026	This IP is being used to host 419 advanced fee fraud scam sites for Nigerian scammers, using the fol ... show more This IP is being used to host 419 advanced fee fraud scam sites for Nigerian scammers, using the following nameservers: dns1.thekinsmenservers.com dns2.thekinsmenservers.com We can see the scam sites here: https://dns.coffee/nameservers/dns2.thekinsmenservers.com Here are some of the scam sites that they host: brocprime.com cityglobalinvestments.com earnings.llc vistatradecapital.com digitalgoldinvest.ltd luxpremiercapital.com capitalaccessonline.com nexiafinance.com show less	Phishing
🇳🇱 82.23.173.201	09 Sep 2026	This IP is being used to host 419 advanced fee fraud scam sites for Nigerian scammers, using the fol ... show more This IP is being used to host 419 advanced fee fraud scam sites for Nigerian scammers, using the following nameservers: dns1.thekinsmenservers.com dns2.thekinsmenservers.com We can see the scam sites here: https://dns.coffee/nameservers/dns2.thekinsmenservers.com Here are some of the scam sites that they host: eliteinvinc.com legit-crypto-exchange.com ctlplc.com growthforgemarketing.net thecapitalsprime.com primeedgebrokerage.com globalalternative.org crownvest-global.com goldtokun.com emporium-prime.com acetradefinance.com globalventureinvest.com stfx-global.com topxinvestments.com show less	Phishing
🇩🇪 198.251.84.141	05 Sep 2026	Hosts 419 advanced fee fraud scam sites like fake investment scams and fake bank scams for Nigerian ... show more Hosts 419 advanced fee fraud scam sites like fake investment scams and fake bank scams for Nigerian scammers. FranTech Solutions are a well known bulletproof hosting provider who facilitate fraud on a massive scale. Just google Francisco Dias and BuyVM and see what a massive scam facilitator this guy is. show less	Phishing
🇺🇸 198.251.81.49	05 Sep 2026	Bulletproof hoster - hosting 419 advanced fee fraud scams like fake bank scams, fake investment scam ... show more Bulletproof hoster - hosting 419 advanced fee fraud scams like fake bank scams, fake investment scams etc. Name Servers: ns103.my-control-panel.com ns104.my-control-panel.com https://dns.coffee/nameservers/ns103.my-control-panel.com Most of the domains are malicious For example: smartstakeholding.com nexusvest.org dxeliteoptions.com altratrade.org realmetatrader5.org 360digitalmarket.com sparkavaition.com maniastock.top perfectglobaltrade.com optimuxtrade.com wealthbridgeinvestmentcompany.com eltebridge.com ultranexincorp.com financialcapitalsolution.com remoticasset-trade.com online-bankdigital.com skymontkeynote.com globalfundstrader.net elateasset.com reprisesolution.com trinovamb.com climxportal.xyz alchemyminers.com experttraders.ltd globalpockettrade.com analizexpert.org show less	Phishing
🇫🇷 5.135.193.194	03 Sep 2026	This is claudpod.com, thney are 419 advanced fee fraud scam facilitators from Nigeria, they host sca ... show more This is claudpod.com, thney are 419 advanced fee fraud scam facilitators from Nigeria, they host scam sites for other Nigerian scammers. Here are the nameservers that they use, we can see the scam sites here: http://dns.coffee/nameservers/ns1.claudpodserver.com http://dns.coffee/nameservers/ns2.claudpodserver.com http://dns.coffee/nameservers/ns3.claudpodserver.com http://dns.coffee/nameservers/ns4.claudpodserver.com http://dns.coffee/nameservers/ns5.claudpodserver.com http://dns.coffee/nameservers/ns6.claudpodserver.com http://dns.coffee/nameservers/ns7.claudpodserver.com http://dns.coffee/nameservers/ns8.claudpodserver.com The types of scam sites that they host are fake bank scams, fake investment scams, fake logistics scams etc. Here are some of the scam sites that they host: 10xprotrade.com adrianandassociateslegalpractitioners.com aerodash.org aerostayglobal.com affiliatenexus.net agrireitstockwealth.com alltvacation.org show less	Phishing
🇫🇷 77.237.243.179	01 Sep 2026	Ali Osazee Joshua aka jjtech_001 uses the following nameserver to host 419 advanced fee fraud scam s ... show more Ali Osazee Joshua aka jjtech_001 uses the following nameserver to host 419 advanced fee fraud scam sites: ns2.serverjjtech1.cc ns1.serverjjtech1.cc [email protected] We can see the scam sites here : https://dns.coffee/nameservers/ns1.serverjjtech1.cc He is a Nigerian 419 advanced fee fraud scam facilitator. Here are some of the scam sites like fake investment scams, fake bank scams etc that are being hosted here. arquenoxinvglobal.com ashbournexiginc.com astravax.com avelorecapitalb.com avixtreimsb.com ccptinc.com ceederglobalequipment.com cptfb.com ecodh-lbest.com egmontgroupturkiye.online elinvbinc.com eliteharborfunds.com emcbco.com expressdreamdelivery.com firstcrestlineinc.com gettoknow-alex.com grandoakcapitalinc.com harlingtoncapitalb.com keenamexpress.com kingsfordfinancial.com kryptiqinc.com lrvbinc.com mwcmanagement.com nbctinc.com nexoralispay.com norwickcapitalb.com novariscroftcapital.com show less	Phishing
🇫🇷 161.97.99.1	31 Aug 2026	This is quickverseironshield.com, who claim "Enterprise-grade bulletproof hosting with global re ... show more This is quickverseironshield.com, who claim "Enterprise-grade bulletproof hosting with global reach, DMCA ignored infrastructure, and military-grade security." they are a 419 advanced fee fraud scam facilitating web host, who host scam sites for other Nigerian scammers. Here are some of the scam sites that they host (such as fake bank scams, and fake investment scams) aiglobaltrademarketing.com becontraders.com bluecrestbinc.com bluecrestincb.com blueom.live cashchain.top charlottejw.com colleenmsc.com crestforlding.com elitemarketstrategies.com fixcashinvest.top globalunittbk.com horozinec.com meridianbest.com primecheckservice.com rayrizth.com teslamodelinv.com theantiquebank.com thomassferry.com tornbase.com tuestrust.com unfbank.com vintabank.com show less	Phishing
🇺🇸 69.30.225.51	30 Aug 2026	This IP is being used to host 419 advanced fee fraud scam sites for anitahost.com using the followin ... show more This IP is being used to host 419 advanced fee fraud scam sites for anitahost.com using the following namesevers amongst others. https://dns.coffee/nameservers/ns1.kun0a1.serverdns.org https://dns.coffee/nameservers/ns1.serverdns.org xplicitplc.com this is one of the 419 advanced fee fraud scam sites. This IP belongs to WII - WholeSale Internet, Inc., US show less	Phishing
🇺🇸 198.251.83.106	10 Aug 2026	Still a massive source of 419 advanced fee fraud scams, such as fake bank scams and fake investment ... show more Still a massive source of 419 advanced fee fraud scams, such as fake bank scams and fake investment scams hosted here, just check: https://urlscan.io/ip/198.251.83.106 This host is used by Nigerian scammers to host scam sites. show less	Phishing
🇫🇷 5.39.69.65	09 Aug 2026	This is server.gb.net/Zelt.ae/HostSeo/Centriohost who are 419 advanced fee fraud scam facilitators a ... show more This is server.gb.net/Zelt.ae/HostSeo/Centriohost who are 419 advanced fee fraud scam facilitators and act as a bulletproof host for scammers, particularly Nigerian 419 scammers who host fake bank scams, fake investment scams, crypto phishing scams, romance scams, fake logistics scams etc They don't respond to abuse complaints and are a favourite host amongst cyber criminals for this reason. We can see some of the scam sites on this IP: https://networksdb.io/domains-on-ip/5.39.69.65 show less	Phishing
🇩🇪 51.75.84.84	31 Jul 2026	This is a scam facilitating Host Hosts 419 advanced fee fraud scam sites for Nigerian 419 scammer ... show more This is a scam facilitating Host Hosts 419 advanced fee fraud scam sites for Nigerian 419 scammers. show less	Phishing
🇫🇷 109.199.100.163	30 Jul 2026	This is being used to host 419 advanced fee fraud scam sites: arabianinternationalpetroleumcorp ... show more This is being used to host 419 advanced fee fraud scam sites: arabianinternationalpetroleumcorporation.com bnkfamerica.com demo1realjossy.xyz montarix.net pplcbank.com realestatewithdinah.com uiaacademy.com show less	Phishing
🇫🇷 13.140.180.106	30 Jul 2026	This is being used to host 419 advanced fee fraud scam sites, for example fake bank scams, fake inve ... show more This is being used to host 419 advanced fee fraud scam sites, for example fake bank scams, fake investment scams etc. abimbolabello.com activexchange.xyz aimonetizationlab.com airglobalonliine.com airglobalonline.com anastasia-marienigltd.com assetvissions.com babawaleade.com bagsbyarin.com barakatjimoh.com beatricepatrick.xyz bluepipstrade.online cadencebn.com chizobauju.com cybernestinfo.com dcohst.com debovat-bv.com epcoilandgasinc.us essietabigail.xyz exchangecorepro.com faithnworie.xyz funmilayoolukoya.com futuretradeyield.com globalroyalcourier.com hacker247-logs.com honeyspringbk.icu ifeolugbenga.com ijayogbonna.com imfmonetary.online imperialglobalcourier.com infinitehubguide.online interarcconcepts.com intervextal.com jenkinsautogroup.online joyekemezie.xyz kafayaadebola.xyz kapitalcreditglobalbk.com logs-store.org logssphere.com etc show less	Phishing
🇺🇸 212.28.189.136	28 Jul 2026	This is used by ns1.smallestgee.com to host 419 advanced fee fraud scams for other Nigerian scammers ... show more This is used by ns1.smallestgee.com to host 419 advanced fee fraud scams for other Nigerian scammers, they are fraud facilitators. https://dns.coffee/nameservers/ns1.smallestgee.com here is a list of the scam sites: nationworldbamking.com harbourstonebank.com instantminers.com backspacecourierlogistics.com flytcorelogistics.com thepatternedloom.com spacetradeoptions.com finneos.com bluepeakoption.com spacexquantumoptions.com teslacapitalpartner.com ourheritagebanking.com crestinvests.com raymondfortune.com nationalfnbanking.com vaulthedgeassets.com legendaryaccessbanking.com apexvestmarkets.com cleartracerecoverys.com expresslinecargo.com tivrocapital.com nwufbank.com ocrheritage.com silvercrestmobilebank.com northcrestbank.com warrenherbert.com crystalcreekbank.com firstbridgelogistics.com financialoptionsrecoverys.com bkwithfps.com euroameribnk.com pioneercapitalbank.com twvaultapp.com yrcdeliverycompany.com etc show less	Phishing
🇳🇱 89.233.107.58	22 Jul 2026	This IP is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scam ... show more This IP is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammers by anitahost.com, who are using the ns1.*.serverdns.org nameserver Here is a list of some of the scam sites that are being hosted here, These are mostly fake bank scams and fake investment scams, which are both variants of the 419 advanced fee fraud scam 24aitradercity.com akashxtradingsltd.com alphabnkuk.com atloffshore.info autofxtrademaster.live blocktradesfxpro.com capitalassetpoint.com capitalgrouplimited.ltd capitalmorisltd.com capitalwestgrand.com climaxpromarket.com credowallet.com deutsclandtrading.com grandheritagetrust.com horizcaptassetincs.com icwbsonline.info imperoconsult.com itsbsonline.info maincapitaltradeline.com maximinxassetltd.com monarchpaybnk.com monlincapital.com newwealthbridge.com nexusglobalwealth.com noblegatetrust.com offshorepacific.info opentradelimited.com show less	Phishing
🇫🇷 5.135.193.195	17 Jul 2026	This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammer ... show more This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammers Scam hosters: https://claudpod.com/ 5.135.193.195 on the following nameservers: https://dns.coffee/nameservers/ns5.claudpodserver.com https://dns.coffee/nameservers/ns6.claudpodserver.com ISP Server Managed by Hostseo Networks Usage Type Data Center/Web Hosting/Transit ASN AS16276 Hostname(s) route-a4.claudpodserver.com Domain Name hostseo.com Country 🇫🇷 France City Strasbourg, Grand Est fake bank scams: ---------------- monzacapitalsavings.com horizoneonlineintl.com aureviatruistbank.com quantanexarefunds.com tidetrustbank.org springfieldcouncil.com fake investment scams: ---------------------- primeactivetrade.org markovamarkets.net investpvf.com capitalhivetrading.com show less	Phishing
🇫🇷 37.187.92.77	10 Jul 2026	This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammer ... show more This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammers, they are all ex dns1.geebytesdns.com sites, and likely connected to geebytescloud.com (https://dns.coffee/nameservers/dns1.geebytesdns.com) They moved 300+ sites on july 5th: https://dns.coffee/nameservers/ns3.claudpodserver.com https://dns.coffee/nameservers/ns4.claudpodserver.com and were being hosted on interserver - 161.129.70.4 before moving to OVH.net where they are currently: ISP OVH SAS Usage Type Data Center/Web Hosting/Transit ASN AS16276 Hostname(s) offshore1.claudpodserver.com Domain Name ovh.net Country 🇫🇷 France City Dunkirk, Hauts-de-France show less	Phishing
🇺🇸 104.243.35.58	08 Jul 2026	This IP is being used by afeeshost.com who are a Nigerian 419 advanced fee fraud scam facilitating w ... show more This IP is being used by afeeshost.com who are a Nigerian 419 advanced fee fraud scam facilitating web host, they don't act on abuse reports and actively host scam sites for other Nigerian cyber criminals Name Servers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com Here are some of the scam sites: inteltrustfx.com maxdropassets.com noblex-markets.com show less	Phishing
🇺🇸 161.129.70.4	06 Jul 2026	This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammer ... show more This is being used to host 419 advanced fee fraud scam sites for Nigerian advanced fee fraud scammers, they are all ex dns1.geebytesdns.com sites, and likely connected to geebytescloud.com (https://dns.coffee/nameservers/dns1.geebytesdns.com) just moved 300+ sites on july 5th: https://dns.coffee/nameservers/ns3.claudpodserver.com https://dns.coffee/nameservers/ns4.claudpodserver.com show less	Phishing
🇺🇸 163.61.188.108	28 Jun 2026	This is connected to lytehosting.com (Who are Nigerian 419 advanced fee fraud scam facilitators on a ... show more This is connected to lytehosting.com (Who are Nigerian 419 advanced fee fraud scam facilitators on a massive scale and ignore all abuse reports) and already has SBL listings on Spamhaus about these IPs: https://check.spamhaus.org/results/?query=SBL697975 https://check.spamhaus.org/results/?query=SBL697980 SBL697975 - 163.61.188.108 2026-06-03 12:35:16 - newdhaka.net Spammer Controlled Nameserver: ns1/2.globaldnsnetwork.com This IP address is currently in use as a nameserver for spamvertized domains. This enables the resolving of spammed domains to the actual websites. This SBL record can only be removed if this IP address stops answering DNS queries for spamvertized domain names. --- ns1.globaldnsnetwork.com. 270 IN A 163.61.188.108 ns2.globaldnsnetwork.com. 264 IN A 163.61.188.108 We can see all the scam sites on the nameserver listed here: https://dns.coffee/nameservers/ns1.globaldnsnetwork.com show less	Phishing
🇱🇺 198.251.88.188	15 Jun 2026	Used by Nigerian 419 advanced fee fraud scammers Reserve Bank of India <[email protected]> sendi ... show more Used by Nigerian 419 advanced fee fraud scammers Reserve Bank of India <[email protected]> sending 419 emails from Return-Path: <[email protected]> Received: from c4.my-control-panel.com (c4.my-control-panel.com. [198.251.88.188]) by mx.google.com with ESMTPS id ffacd0b85a97d-4606f308fdcsi17190392f8f.287.2026.06.15.06.20.17 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 15 Jun 2026 06:20:17 -0700 (PDT) Received-SPF: pass (google.com: domain of [email protected] designates 198.251.88.188 as permitted sender) client-ip=198.251.88.188; show less	Email Spam Phishing
🇳🇱 192.142.10.186	10 Jun 2026	Ultahost allowing 419 advanced fee fraud scammers on their servers without suspension: Nigerian f ... show more Ultahost allowing 419 advanced fee fraud scammers on their servers without suspension: Nigerian fraudsters using the following name servers: ns1.hlogicdock.cloud ns2.hlogicdock.cloud bitstampfx.com \| fake investment scam bravenalgo.pro \| fake investment scam calekfnce.online \| fake investment scam coasmerb.com \| fake bank scam credenceonetrust.com \| fake bank scam crypishrre.com \| fake investment scam deepwavecargoltd.com \| fake logistics scam deepwaveepress.com \| fake logistics scam expressdeliveryservices.online \| fake logistics scam finprotexzcreditunion.com \| fake bank scam fortecrestplc.com \| fake bank scam globalbridgeshipspire.info \| fake logistics scam gotruckdelivery.com \| fake logistics scam kryloapexium.top \| fake investment scam metroocapfb.com \| fake bank scam noblepayz.com \| fake bank scam novaexps.com \| fake logistics scam opencarevaults.com \| vault scam p2pexc.online \| crypto scam etc show less	Phishing
🇩🇪 159.100.6.19	09 Jun 2026	Just more 419 advanced fee fraud scams being hosted on Ultahost who do nothing about them: 247tra ... show more Just more 419 advanced fee fraud scams being hosted on Ultahost who do nothing about them: 247trademarket.com abundantthrives.com affiliatemarketlitepro.com aicryptocore.net alpha-primefx.com apexcoremarkets.net apexfutureswealth.com atlasedgeinc.pro atlasholdinginc.com atlaxchazebanking.com aurumtrustbnk.com bkofheritage.online blockfinex.ltd blocks-stream.pro bluecrestult.com bnkofheriitage.com capitalfinanceinvestments.com capitaltrustybk.com captgenuisplc.com cinderfcu.com citizensbaoox.com coinmarketcaa.com coldwalletexpert.com corecapitals.org cploot.com credencecapitaltrustbk.online cronasset.com crownmonarchbank.com denionline.com denzb.com deroidpro.com detrixalerce.org doubledoorcapital.com elitewealthholding.ltd finanvoinvestmentinc.com fullinvest.pro gdanskcapitalbk.online globalpipnations.org guarantyfbk.com halalethics.net imperialtrademarket.com infinityvaultcapital.com etc..... show less	Phishing